CVE-2006-1744

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-12 · updated 2026-06-16

Description

Buffer overflow in pl_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call.

Affected products

Joey Hess Bsdgames: 2.9, 2.12, 2.13, 2.14, 2.17

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360989
http://secunia.com/advisories/19687
http://securityreason.com/securityalert/736
http://www.debian.org/security/2006/dsa-1036
http://www.osvdb.org/24634
http://www.pulltheplug.org/fu/?q=node/56
http://www.securityfocus.com/bid/17401
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360989
http://secunia.com/advisories/19687
http://securityreason.com/securityalert/736
http://www.debian.org/security/2006/dsa-1036
http://www.osvdb.org/24634

Get alerted when CVE-2006-1744 or the next vulnerability affects your stack